You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@spamassassin.apache.org by bu...@bugzilla.spamassassin.org on 2018/10/01 09:12:41 UTC

[Bug 7618] Obtain variance to keep producing SHA-1 signatures for rules

https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7618

--- Comment #7 from Kevin A. McGrail <km...@apache.org> ---
Variance no longer needed "the requirement to drop SHA1 was initially MUST NOT
but
      as dg says it's now SHOULD, at
      http://www.apache.org/dev/release-distribution#sigs-and-sums -
      so nothing to approve indeed, SpamAssassin can continue to use
      SHA1 for a transition period."

Recommend as a team that we notify people that Dec 31, 2019 we will stop
producing SHA1 rule signatures.

-- 
You are receiving this mail because:
You are the assignee for the bug.